Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
File: BaQevhJyohyuDqGzXcCD-taKXX0.cer (raw, json)
Hash identifier: z2DzStUvhYi5Dgv7wtPcuqDPiqbiRDyZfRTxHBwkZ9Y=
Subject key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B77F4589442B57BE729F9CCDD94CEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59622
IP: 151.252.32.0/21
IP: 2a01:aa40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7f:45:89:44:2b:57:be:72:9f:9c:cd:d9:4c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:77:27:ac:ea:0e:e7:83:25:ec:92:20:af:
6a:17:02:76:68:20:a5:d1:52:ff:76:41:9c:1a:1a:
bc:53:40:6b:e2:70:71:64:75:c6:b1:35:f4:ae:c6:
9a:ef:90:7b:15:53:4f:81:aa:0e:0b:6e:6d:ce:fe:
b1:46:4c:3d:ed:0d:af:9f:4e:85:01:f1:5f:86:71:
69:9c:5d:ca:30:d4:47:e4:43:ba:55:d3:1a:74:b7:
09:5d:60:ac:6f:ba:e0:b0:eb:fe:d7:bf:70:02:4e:
e7:6b:0a:9e:d0:c8:53:87:e4:b2:3e:9c:76:56:eb:
1f:44:4e:10:7a:7f:9c:43:f4:f0:5c:fc:14:66:4f:
9b:8f:45:2b:43:a0:ce:f7:ae:a4:e5:69:6e:5a:90:
05:63:67:c7:33:ac:e6:e5:75:c1:98:af:e1:1d:68:
b3:91:47:61:b0:00:37:ed:d7:4b:f2:e1:7b:14:dc:
7d:09:ef:ad:cf:42:0a:e6:e3:97:fb:1a:34:bc:e3:
fc:32:47:35:22:74:84:08:8c:41:8e:df:a5:f1:4e:
0e:c9:25:9f:c3:7d:1c:03:14:b4:b8:a8:05:70:61:
df:0e:00:b9:07:d8:b4:8f:b9:e7:7d:41:45:66:4e:
af:45:50:bb:e9:39:28:5c:ad:85:87:7f:37:95:40:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.252.32.0/21
IPv6:
2a01:aa40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59622
Signature Algorithm: sha256WithRSAEncryption
ad:72:46:18:99:bd:68:14:0e:85:9e:2e:4b:a1:b2:33:28:e7:
07:3e:ee:92:67:3a:2c:41:83:fe:85:ab:1e:3b:3c:8c:13:05:
44:c9:83:a6:fb:29:65:e7:a1:8c:6a:6a:26:bf:d3:53:8a:9f:
54:4f:b6:98:77:49:a0:59:7b:28:b0:56:14:13:bc:38:bc:95:
0e:bd:8d:e6:58:18:38:f6:b8:94:16:1c:13:fc:97:c7:c8:e5:
29:a5:c4:12:d6:e6:8d:16:e2:00:a4:d5:88:39:9b:e3:00:c9:
89:11:61:64:dd:07:1a:78:37:c0:da:50:41:be:e7:89:bc:da:
e4:63:71:f5:96:99:2b:69:fc:d1:4c:3b:0c:9d:9f:3a:0e:5e:
1a:8c:60:67:0e:80:9c:07:f1:59:c4:74:fc:ab:6d:ac:cf:65:
c0:77:2c:30:1f:b6:2e:9d:67:ed:0c:f7:69:ae:a4:d8:68:cd:
0a:46:71:9f:0e:e3:4c:9d:28:74:91:be:1a:7b:0d:9a:66:62:
e0:cf:2a:81:a4:44:5f:19:ff:b0:c8:af:a0:15:28:01:ab:6b:
07:be:13:1d:4a:98:4d:2c:0f:82:da:69:95:c4:aa:b4:93:dd:
c1:bd:31:51:c8:e0:35:5d:dc:8e:70:71:73:3c:b5:01:ff:3f:
e1:0e:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:12:14 2024 by rpki-client on console-fra.rpki-client.org